Last updated November 1, 2026
Cards, fields and attachments are stored encrypted on your Mac, and the key does not leave that Mac. dofu has no permission to make network connections, so it has no way to send your drawer anywhere.
A few things happen locally and still deserve a word:
If you turn on sync or backups, dofu encrypts your cards, fields and attachments before writing them to a folder you choose: iCloud Drive, Google Drive, Dropbox, a network share or a disk. That service moves and stores the files under its own privacy policy. It cannot read your card or attachment contents, but it can see file names, sizes and times. Sync also writes some unencrypted information needed to coordinate your Macs, including their names and identifiers, format versions, whether a Mac has left the sync group, and sync sequence numbers and times. The service can read that information too. We are not involved, and we never see the files or your password.
Because only you have the password, we cannot recover it or the data it protects. Some services keep earlier versions of files for a while; the card and attachment contents in those versions remain encrypted.
From the App Store, updates are Apple’s, under Apple’s privacy policy.
From this site, dofu includes a separate updater, which asks before it checks for the first time. Checks and downloads go to download.getdofu.app. Like any web request, they carry your IP address and the version you have.
dofu never sends a crash report on its own. After a crash it shows you the report and asks whether to send it or copy it.
A report contains the dofu version, macOS version, Mac model and chip, the kind of crash, and the program addresses where it happened. It does not contain your cards, field names, values, attachments, file names, paths or error messages, which could carry them.
Choosing Send opens getdofu.app/crash/ in your browser. Nothing is sent until you press Send on that page, where you can read the report first and add a note and an email address, both optional. Then:
support@getdofu.app.If you have the App Store version and have chosen to share analytics with developers in macOS, Apple may also pass crash reports to us. You can change that in System Settings → Privacy & Security → Analytics & Improvements.
When you write to support@getdofu.app we receive whatever you send and use it only to reply. The inbox is hosted by Zoho Mail.
If sync has a problem, dofu can show diagnostic information for you to paste into an email. You read it first, and you copy it yourself; dofu sends nothing. It lists the dofu and macOS versions, sync status, file counts and sizes, device identifiers and sequence numbers, which kind of service holds the sync folder, and the names of your Macs. It never includes cards, values, attachment names, passwords, keys or folder paths.
From this site, payment is handled by Paddle, which sells dofu on our behalf as the merchant of record. Your card and billing details go to Paddle and are covered by Paddle’s privacy policy. We receive your email address, country and the order, so we can send your license key and help with it later. The license key carries your email address, and dofu checks it on your Mac without going online.
From the App Store, Apple handles the purchase and doesn’t tell us who you are.
getdofu.app is a static site hosted by Cloudflare. We use Google Analytics to see how many people visit and which pages they read. Each page view sends Google your IP address, browser and device details, and the page, under Google’s privacy policy. Google Analytics only sets cookies if you allow them when the site asks; until then it counts visits without them. You can change your answer under Cookie settings at the bottom of any page, or block Google Analytics entirely with a content blocker, and the site works the same. We don’t show ads, and this does not reach the app. Cloudflare handles each request, including your IP address, to deliver the site and protect it from abuse. Cloudflare Web Analytics also measures each page view, with the page you came from, your browser and device type, and load speed. It sets no cookies and stores nothing in your browser, and a content blocker can stop it too.
We don’t sell or rent personal information, and we don’t share it with anyone except the services named here, each doing the job described. We would disclose information if the law required it.
You can ask what we hold about you, have it corrected, or have it deleted: write to support@getdofu.app. For most people the answer is nothing, since nothing reaches us unless you send it. Crash reports, notes and email addresses in R2 are deleted after 90 days whether you ask or not. That rule does not delete the copies in our support inbox; you can ask us to delete those too.
dofu isn’t directed at children, and we don’t knowingly receive information from them.
If this policy changes, the new version goes on this page with a new date. A change to what dofu sends, or to whom, will also be in the release notes of the version that makes it.
dofu and getdofu.app are made and run by The Traveling Twins Co., Ltd. (旅人兄弟有限公司), the “we” of this policy.
7F-5, No. 329, Sec. 3, Jiankang Rd., Anping Dist., Tainan City, Taiwan
Questions about privacy: support@getdofu.app.
Help us improve these pages? We'd use Google Analytics cookies.